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= (54) Title: METHOD OF AND SYSTEM FOR PROVIDING QUALITY OF SERVICE IN IP TELEPHONY 




^ (57) Abstract: A method and system (11) for providing Quality of service in an IP telephony session between a calling \ ■ 

j and a called party (23) establishes a high quality of service ATM virtual circuit for the session between first and second devices (25, 
^ 27), each of the devices {25, 27) having ATM capability and IP capability. The first and second devices (25, 27) provide bidirectional 

translation between IP media and ATM media. The system (1 1) transports IP media for the session between the calling party (21 ) 
O and the first device (25), and between said called party (23) and a second device (27). The virtual circuit transports ATM media tor 

the session between the first and second devices {25, 27). Ait intelligent control layer (13) provides IP and ATM signaling to set up 

the session. 
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METHOD OF AND SYSTEM FOR PROVIDING QUALITY OF 
SERVICE IN IP TELEPHONY 

The present invention relates generally to the field of Internet telephony, and more particularly 
to a method of and system for providing quality of service in an Internet telephony session. 

Two trends are currently occurring in the telecommunications marketplace. First, telephony 
services are being added to Internet protocol-based devices. Second, Asynclironous Transfer Mode 
(ATM) networks are being buih with the ability to support user specified quality of service (QoS) on a 
per connection basts, as part of the ATM switched virtual circuit service capability. 

Each of these trends have problems. The primary problem with the introduction of telephony 
services to the IP network is one providing predictable QoS on a per call/connection basis. Although 
teclmoiogies arc being developed in the Internet community to address this problem, there is currently 
no way to guarantee QoS on a per connection basis through an IP network. The primary problem with 
the second trend is not one of basic service capability, but is rather one of access to the service. Today 
virtually all desktop devices have access to an IP network through some sort of local area network 
technology, for example tlirough Ethernet. The problem is that these desktop devices generally do not 
have access to ATM networks that provide the per call/connection guarantee QoS. 

The primary method of addressing QoS in the current IP-BASED networks is to over- 
provision the amount of bandwidth available in the network. Tliis approach will work as long as the 
usage of the network stays within the bounds of the available bandwidth. If the usage of the network is 
not predictable, then it is difficult, for example, to prevent a low priority file transfer from interfering 
with a connection established to carry real-time voice or video data. 

The primary method of providing ATM switched virtual circuit services to devices that do not 
have native ATM support is to install routers between the IP network and the ATM network that have 
the ability to generate ATM switched virtual circuits on a per IP flow basis. The problems with this 
approach are: (I) possible destination IP addresses need to be provisioned in the router ahead of time, 
and (2) it is not possible to define, on an IP flow basis, which IP flow should get the ATM switched 
virtual circuit service and which should get BP best efforts service. If a destination address is 
provisioned in the ATM interworking router, then all connections to that destination address will 
require an ATM switched virtual circuit. 
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The present invention provides a method of and a system for providing quality of service in an 
IP telephony session between a calling party client and a called party client. The system of the present 
invention establishes a high quality of service ATM virtual circuit for the session between first and 
second devices, each of the devices having ATM capability and IP capability. The first and second 
devices provide bidirectional translation between Internet Protocol (IP) media and ATM media. The 
system transports IP media for the session between the calling parry client and the first device, and 
between the called party client and the second device. The virtual circuit transports ATM media for 
the session between the first and second devices. An intelligent control layer provides IP and ATM 
signaling to set up the session. 

In one embodiment of the present invention, the first and second devices include access control 
managers that are bridges between an IP network and an ATM network. The intelligent control layer 
assigns a temporary session IP proxy address for the called party at the first access control manager 
and a temporary session IP proxy address for the calling party at the second access control manager. 
The system establishes i switched virtual circuit through the ATM network for the session between the 
first access control mm aper and the second access control manager by assigning a temporary session 
calling party nur. bcr a* the first access control manager and a temporary session called party number at 
the second access control manager. 

During the session, the system routes IP media from the calling party to the temporary IP 
proxy address of the called party at the first access control manager. The first access control manager 
packages the IP media in ATM cells for transport through the virtual circuit to the second access 
control manager. The system then routes IP media from the second access control manager to the 
caUed party. Similarly, the system routes IP media from the called party to the temporary IP proxy 
address of the calling party at the second access control manager. The second access control manager 
packages the IP media in AIM cells for transport through the virtual circuit to the first access control 
manager. The system then routes IP media from the first access control manager to the calling party. 

In an alternative embodiment, the first and second devices include routers that have both IP and 
ATM capability. The caUing party client obtains an authentication ticket and then initiates an IP 
telephony session with a quality of service request. When the called party client accepts the session, 
the calling party client initiates setup of a resource reservation protocol IP media session with an 
ingress router. The ingress router then sets up the IP media session through an egress router to the 
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called party client. When the IP media session is setup, the ingress router sets up an ATM switched 
virtual connection with the egress router. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram of a preferred embodiment of the system of the present invention. 
Fig. 2 is a call flow diagram illustrating the signaling and call setup according to the 
embodiment of Fig. 1, 

Fig, 3 is a block diagram of an alternative embodiment of the system of the present invention. 
Fig. 4 is a call flow diagram illustrating the signaling and call setup according to the 
1 0 embodiment of Fig. 3 . 

DETAILED DESCRIPTION 

Referring now to the drawings, and first to Fig. I, a system according to a preferred 
embodiment of the present invention is designated generally by the numeral 11. System 1 1 includes a 

15 media service control point (MSCP) 13. MSCP 13 includes an IP telephony session establishment 
server, which in the preferred embodiment is a session initiation protocol (SIP) server 15, an ingress 
Asynchronous Transfer Mode (ATM) MSCP 17, and an egress ATM MSCP 19. As will be explained 
in detail hereinafter, MSCP 13 provides an intelligent control layer for the establishment of an Internet 
Protocol (IP) telephony session between a first IP telephony user client 21 and a second IP telephony 

20 user client 23. 

System 1 1 includes an ingress access control manager 25 and an egress access control manager 
27. Access control managers 25 and 27 provide a media gateway between IP telephony user clients 21 
and 23 and an ATM network 27. Ingress access control manager 25 provides an ATM media and 
signaling interface to an ingress ATM switch 29 of ATM network 27. Similarly, egress access control 
25 manager 27 provides an ATM media and signaling interface to an egress ATM switch 3 1 of ATM 
network 27, 

In Fig. I, IP signaling paths are indicated with dotted lines and ATM of signaling paths are 
indicated with dashed lines. BP media paths are indicated with solid lines and ATM media paths are 
indicated with bold soEd lines. 
30 In the embodiment of Fig. I, a Quality of Service (QoS) connection is provided by routing 

traffic on the QoS capable backbone provided by ATM network 27, According to the present 
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invention, ail ATM connection is created for the IP telephony session between user clients 21 and 23. 
QoS extensions to the data network applications part (DNAP) protocol perform the signaling between 
MSCP 13 and access control managers 25 and 27. The access control managers 25 and 27 establish 
the ATM QoS capable connection. While in the preferred embodiment of present invention, the QoS 
capable connection is provided by ATM switched virtual circuits, the present invention can also be 
implemented m a variety of other technologies, such as SONET, and wave division multiplexing. 

As will be explained in detail hereinafter, the data path for the session is secured against 
unauthorized traffic by the use of proxy addressing. The proxy addressing requires translation by the 
access control managers 25 and 27 to route the media to its intended destination. During session 
establishment, the addresses of the media stream endpoints are exchanged between user client 21 and 
user client 23. The signaling message containing the media address of user client 21 is changed to 
reflect a proxy address, which is an interface at egress excess control manager 27. The excess control 
manager interface is assigned on a per session basis. The per session interface uniqueness is 
accomplished by the allocation and deallocating of ephemeral ports at the access control managers. 
Associated with the ephemeral ports are the addresses used to create and transit the ATM connection. 
Likewise, the signaling message containing the media address for user client 23 is changed to reflect a 
proxy address at ingress access control manager 25. 

The system of the present invention dynamically configures QoS connections and ensures their 
security in two ways. First, the QoS connection is dynamically configured by the use of ATM switched 
virtual connections. The switched virtual connections are created on a per session basis during call 
establishment. MSCP 13 invokes the IP to ATM interface mechanisms of access control managers 25 
and 27 with DNAP QoS messages. As will be explained in detail hereinafter, access control manager 
25 launches a user network interface (UNI) protocol setup. The ATM traffic sent to and received by 
access control managers 25 and 27 is intercepted by ATM switches 29 and 3 1, respectively, and 
forwarded to their associated ATM MSCPs 17 and 19. The ATM MSCPs create the switched virtual 
circuit between ATM switches 29 and 3 1. Access control managers 25 and 27 map the media stream 
of the session to its switched virtual circuit and the session traffic transits their respective switch virtual 
circuit. 

The second aspect of the real-time configuration solution is the dynamic securing of the access 
to the connections. This is done by dynamically allocating the proxy addresses during session 
establisliment from a pre-provisioned proxy address pool The proxy addresses are returned to the 
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user clients 21 and 23 in the signaling messages. The session proxy address mapping is created at the 
MSCP and communicated to access control managers 25 and 27 by the DNAP protocol. The proxy 
addresses and the actual session addresses are held at the SIP server 15 and the access control 
managers 25 and 27 for the duration of the session. When the session is terminated, proxy addresses 
are deallocate. 

Referring now to Fig. 2, there is shown a call flow diagram of session initiation according to 
the embodiment of Fig. 1. User client 21 initiates the session by sending a SIP INVITE message 33 to 
user client 23. For purposes of illustration, the IP address of user client 21 isA@XYZ.COM. The SIP 
INVITE is addressed to user client 23 at a proxy address at MSCP SIP server 1 5, which for purposes 
to illustration is B@XYZ-SIP.COM. The SIP INVITE specifies the audio source as the real IP 
address of user client 21, and specifies that QoS is requested. Upon receipt of invite 33, SIP server 15 
sends an invite 35 to the real IP address of user client 23, at B@XYZ2000.COM. Invite 35 specifies 
the audio source as a temporary IP proxy address allocated to user client 21 at egress access control 
manager 27, which for purposes of illustration is A@ACM-Y.COM. If user client 23 accepts the 
session, user client 23 sends a 200OK SIP response 37 back to SIP SERVER 15, specifying an audio 
destination as its real IP address. While in the preferred embodiment, SIP IP telephony signaling is 
used, other IP signaling protocols, such as H.323 may be used. 

Upon receipt of response 37, SEP server 15 allocates a call tag, and sends a reserve bandwidth 
message 39 to ingress ATM MSCP 17. Message 39 specifies the audio destination for the session of 
as a temporary IP proxy address allocated to user client 23 at ingress access control manager 25. For 
purposes of illustration, the temporary IP proxy address allocated user client 23 is 
B@ACM-X.COM. The bandwidth reservation message also identifies the call tag and specifies the 
called number for the ATM connection as egress access control manager 27. 

Upon receipt of bandwidth reservation message 39, ingress ATM MSCP 17 sends a QoS setup 
request 41 to ingress access control manager 25. Setup request 41 identifies the real source address 
and proxy source address for user client 2 1 . Setup request 4 1 also identifies the call tag and the called 
party number. Ingress ATM MSCP 17 also sends a QoS setup indication message 43 to egress access 
control manager 27. Setup indication 43 identifies the real destination address and proxy destination 
address for user client 23, as well as the call tag and the called party number for the ATM session. 
Egress access control manager 27 responds to setup indication 23 with a setup indication 
acknowledgment 45 back to ingress ATM MSCP 17. Upon receipt of the QoS setup request 41, 
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ingress access control manager 25 sends a user network interface (UNI) protocol setup message 47 to 
ingress ATM switch 29. Upon receipt of UNI setup message 47, ingress ATM switch 29 sends a 
DNA1> setup 49 to ingress ATM MSCP 17. When ingress ATM MSCP 17 responds, as indicated at 
51, ingress ATM switch 29 sends a setup message 53 to egress ATM switch 3 1 . Upon receipt of setup 
message 53, egress ATM switch 31 sends a DNAP setup message 55 to egress ATM MSCP 19. 
When egress ATM MSCP 19 responds, as indicated at 57, egress ATM switch 3 1 sends a UNI setup 
message 59 to egress access control manager 27. 

Upon receipt of setup message 59, egress access control manager 27 sends a CONNECT 
message 61 to ingress access control manager 25. Upon receipt of CONNECT message 61, ingress 
access control manager 25 responds to QoS setup request 41 with a QoS setup request 
acknowledgment 63 back to ingress ATM MSCP 17. Upon receipt of setup request acknowledgment 
61, ingress ATM MSCP 17 responds to the reserve bandwidth message 39 with a reserve bandwidth 
acknowledgment message 65 back to MSCP SIP server 15. Upon receipt of reserve bandwidth 
acknowledgment 65, SEP server 1 5 deallocate the call tag and sends a SIP 200 OK response 67 back to 
user client 21. The OK response identifies the audio destination as the temporary IP proxy address 
allocated to user cliei.t 23 at ingress access control manager 25. Then, user client 21 sends IP media 
packets address-d to user client 23 at the temporary proxy address at access control manager 25. 
Similarly, user client 23 sends IP media packet addressed to user client 21 at the temporary proxy 
address at egress access control manager 27. 

From the foregoing, it may be seen that the embodiment of Fig. I provides QoS for IP 
telephony sessions between IP user clients. Through the use of temporary proxies, user clients 21 and 
23 are unaware that their session is carried on an ATM switched virtual circuit. User clients 21 and 23 
use standard SIP messaging and standard proxying for call setup and no special intelligence is required 
on the part of the user clients 21 and 23. An intelligent network layer makes the system of the present 
invention transparent to user clients 21 and 23. 

Referring now to Fig. 3, an alternative embodiment of the system of the present invention is 
designated generally by die numeral 71. System 71 includes MSCP indicated generally at 73. MSCP 
73 includes an MSCP SIP server 75, an ingress ATM MSCP 77, and an egress ATM MSCP 79. 
Additionally, MSCP 73 includes a policy server 81. MSCP 73 is adapted to establish a QoS IP 
telephony session between a calling user client 83 and a called user client 85. 

An ingress router 87 provides an urterfece between IP user client 83 and an ATM network 89. 
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An egress router 91 provides interface between user client 85 and ATM network 89. ingress router 
87 provides an interface to an ingress ATM switch 93 of ATM network 89. Similarly, egress router 91 
provides an interface to an egress ATM switch 95 of ATM network 89. 

Referring now to Fig. 4, there is shown a call flow diagram of session initiation according to 
the embodiment of Fig. 3. User client 83 initiates the session with a Diameter protocol session 
audrenucalion request 97 addressed to MSCP SEP server 75. Server 75 responds with a Diameter 
session authentication response {ticket), as indicated at 99. Then, user client 83 sends a SIP INVITE 
message 101 to user client 85. For purposes of illustration, the IP address of user client 85 is 
A@XYZ.COM. The SIP INVITE 101 is addressed to user client 85 at a proxy address at MSCP SIP 
server 75, which for purposes to illustration is B@XYZ-S1P.COM. The SIP INVITE 101 specifies the 
audio source as the real IP address of user client 83, and specifies that QoS is requested. The SIP 
INVITE 101 also includes the authentication ticket received in response to Diameter session 
authentication request 97. Upon receipt of the SB? INVITE 101, SIP server 75 sends an INVITE 103 
to the real IP address of user client 85, at B@XYZ2000.COM. INVITE 103 specifies the audio 
source as the IP address of user client 83. If user client 85 accepts the session, user client 85 sends a 
200OK SIP response 105 back to SIP Server 75, specifying an audio destination as its real IP address. 

Upon receipt of 200OK SIP response 105, SIP server 75 sends a reserve bandwidth message 
107 to MSCP polity server 8 1 . Message 107 specifies the audio source for the session of as the real IP 
address of user client 83, and the audio destination for the session as the real IP address of user client 
85. The message 107 also includes the authentication ticket. Upon receipt of the message 107, MSCP 
policy server 81 sends a response 109 back to MSCP SIP server 81. Then, SIP server 75 sends a SIP 
20QOK response 1 11 to user client 83. 

Upon receipt of 200OK response 111, user client 83 sends a resource reservation protocol 
(RSVP) path message 1 13 to ingress router 87. Then, ingress router 87 sends a COPS request handle 
message 11 5 to MSCP policy server 81 . When MSCP policy server 8 1 responds, as indicated at 1 17, 
ingress router 87 sends an RSVP path message 1 19 to egress router 91. Then, egress router 91 sends 
an RSVP path message 121 to user client 85. User client 85 responds with an RSVP reservation 
response 123 back to egress router 91. Egress router 91 then responds with an RSVP reservation 
response 125 back to ingress router 87. 

Upon receipt of response 125, ingress router 87 sends a UNI setup message 127 to ingress 
ATM switch 93. Upon receipt of UNI setup message 127, ingress ATM switch 93 sends a DNAP 
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setup i29 to ingress ATM MSCP 77. When ingress ATM MSG* 77 responds, as indicated at 131, 
ingress ATM switch 93 sends a setup message 133 to egress ATM switch 95. Upon receipt of setup 
message 133, egress ATM switch 95 sends a DNAP setup message 135 to egress ATM MSCP 79. 
When egress ATM MSCP 79 responds, as indicated at 137, egress ATM switch 95 sends a UNI setup 
message i 39 to egress router 91 , 

Upon receipt of setup message 139, egress router 91 sends a CONNECT message 141 to 
ingress router 87. Upon receipt of CONNECT message 141, ingress router 87 responds to RSVP 
path message 113 with an RSVP reserve response 143 back to user client 83. Then, the IP telephony 
session is established between user client 83 and user client 85. 

The embodiment of Figs. 3 and 4, distributes a certain amount of system intelligence to user 
clients 83 and 85. User clients 83 and 85 are responsible for a greater part of call setup than axe user 
clients 21 and 23 of the embodiment of Figs. I and 2. User clients S3 and 85 process signaling in 
Diameter and RSVP protocols in addition to signaling in SIP protocol. 

From the foregoing it may be seen that the present invention overcomes the shortcomings of 
the prior art. The present invention dynamically establishes and secures QoS IP telephony sessions by 
routing traffic on a high QoS backbone, which is preferably an ATM backbone. Those skilled in the art 
will recognize alternative embodiments, given the benefit oftliis disclosure. Accordingly, the foregoing 
disclosure is intended for purposes of illustration and not limitation. 
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WHAT IS CLAIMED IS: 

1 I. A method of providing quality of service in an Internet Protocol (IP) telephony session 

2 between a calling party and a called party, which comprises the steps of: 

transporting IP media for said session between said calling party and a first device having IP 

4 capability and ATM capability, 

5 transporting IP media for said session between said called party and a second device having IP 

6 capability and ATM capability; and 

7 establishing an ATM virtual circuit for said session between said first device and said second 

8 device, 

I 2, The method as claimed in claim 1 , wherein said first and second devices are routers. 

1 3. The method as claimed in claim 1, wherein: 

2 said first device is identified by a temporary session IP proxy address for said called party; and 

3 said second device is identified by a temporary session IP proxy address for said calling party. 

1 4. The method as claimed in claim ! , wherein said step of establishing an ATM virtual circuit 

2 between said first and second devices comprises the steps of: 

3 assigning a calling party number for said session at said first device; and 

4 assigning a called party number for said session at said second device. 

1 5, A method of providing quality of service in an IP telephony session between a calling party and 

2 a called party, which comprises the steps of: 

3 assigning a temporary IP proxy address for said called party for said session at a first access 

4 control manager, 

5 assigning a temporary IP proxy address for said calling party for said session at a second access 

6 control manager, and 

7 establishing a switched virtual circuit for said session between said first access control manager 
S and said second access control manager. 
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1 6. The method as claimed in claim 5, wherein said step of establishing said virtual circuit 

2 comprises the steps of 

3 assigning a temporary calling party address for said session at said first access control manager; 

4 and 

5 assigning a temporary called parry address for said session at said first access control manager, 

1 7. The method as claimed in claim 6, wherein said step of assigning a temporary catling party 

2 address comprises the step of selecting a calling party address from a pool of calling party addresses 

3 allocated to said first access manager. 

1 8 The method as claimed in claim 6, wherein said step of assigning a temporary called party 

2 address comprises the step of selecting a called party address from a pool of called party addresses 

3 allocated to said second access manager. 

1 9. The method as claimed in claim 5, further comprising the steps of: 

2 routing 11' meO a traffic from said calling party to said called party BP proxy address at said first 

3 access control manager, and 

4 routing IP media traffic from said called party to said calling party IP proxy address at said 

5 second access control manager, 

1 10, The method as claimed in claim 9, further comprising the steps of 

2 translating IP media traffic received at said called party IP proxy address to ATM traffic for 

3 transport through said virtual circuit from said first access control manager to said second access 

4 control manager; and 

5 translating IP media traffic received at said calling party IP proxy address to ATM traffic for 

6 transport through said virtual circuit from said second access control manager to said first access 

7 control manager. 
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1 i 1 . The method as claimed in claim 10, further comprising the steps of: 

2 translating ATM traffic received at said temporary called party address to IP media traffic for 

3 transport to said called party, and 

4 translating ATM traffic received at said temporary calling party address to IP media traffic for 

5 transport to said calling party. 

1 12. A method of providing quality of service in an IP telephony session between a calling party and 

2 a called parry, which comprises the steps of: 

3 assigning a temporary IP proxy address for said called party for said session at a first access 

4 control manager, 

5 assigning a temporary IP proxy address for said calling party for said session a second access 

6 control manager; 

assigning a temporary second network calling party address for said session at said first access 

8 control manager, and 

9 assigning a temporary second network called party address for said session at said first access 
10 control manager. 

1 13. The method as claimed in claim 12, wherein said step of assigning a temporary second network 

2 calling party address comprises the step of selecting a calling party address from a pool of second 

3 network calling party addresses allocated to said first access manager. 

1 14. The method as claimed in claim 12, wherein said step of assigning a temporary second network 

2 called party address comprises the step of selecting a called party address from a poo! of second 

3 network called party addresses allocated to said second access manager. 

1 15. The method as claimed in claim 12, further comprising the steps of: 

2 routing IP media traffic from said calling party to said called party IP proxy address at said first 

3 access control manager; and 

4 routing IP media traffic from said called party to said calling party IP proxy address at said 

5 second access control manager. 
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16. The method as claimed in claim 1 5, wherein: 
said second network includes an ATM network; 

said temporary second network calling party address includes a temporary calling party 
number; and 

said temporary second network called party address includes a temporary called party number. 

17. The method as claimed in claim 1 6, further comprising the step of establishing a switched 
virtual connection through said ATM network between said temporary called party number and said 
temporary calling party number. 

18. The method as claimed in claim 1 7, further comprising the steps of: 

translating IP media traffic received at said called party IP proxy address to ATM traffic for 
transport tlirough said virtual circuit from said first access control manager to said second access 
control manager; and 

translating IP media traffic received at said calling party IP proxy address to ATM traffic for 
transport tlirough said virtual circuit from said second access control manager to said first access 
control manager. 

1 9. The method as claimed in claim 1 7, further comprising the steps of: 

translating ATM traffic received at said temporary called parry number to IP media traffic for 
transport to said called party; and 

translating ATM traffic received at said temporary calling party number to IP media traffic for 
transport to said calling party. 
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1 20. A system for providing a quality of service IP telephony session between a calling party and a 

2 called party, which comprises: 

an IP network, said IP network providing IP access to the calling party and to the called party; 

4 an ATM network; 

5 a iirst device connected between said IP network and said ATM network, said first device 

6 providing bidirectional translation between H* media traffic and ATM traffic; 

7 a second device connected between said IP network and said ATM network, said second 

8 device providing bidirectional translation between ATM traffic and IP media traffic; and 

9 an intelligent control layer for establishing a virtual circuit through said ATM network for an IP 
1 0 telephony session between the calling party and the called party. 

1 2 i . The system as claimed in claim 20, wherein: 

2 said first device is operably connected to an ingress switch of said ATM network; and 

3 said second device is operably connected to an egress switch of said ATM network. 

1 22. The system as claimed in claim 20, wherein said intelligent control layer comprises: 

2 an ATM intelligent controller, said ATM intelligent controller providing session setup signaling 

3 to said first and second devices; and 

4 an IP intelligent controller, said IP intelligent controller providing call setup signaling to said 

5 ATM intelligent controller. 

1 23 . The system as claimed in claim 20, wherein in said first and second devices each comprise a 

2 router. 

1 24, The system as claimed in claim 20, wherein said intelligent control means comprises: 

2 means for assigning a temporary IP session proxy address for said called party at said first 

3 device; and 

4 means for assigning a temporary IP session proxy address for said calling party at said second 

5 device. 
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